My SIEM managed host shows an expiration date for a perpetual license.

Answer

The user interface will have 2 entries for the host in question. In the licensing view, one will show with a perpetual license and the other with an expiration date usually fast approaching or just passed. One line is the default view of the generic install package. The other reflects the license attributes added by the license key.

RESOLUTION:

This is a generic bug, trial line item does not get removed, which is something that needs to be patched. This is a common issue, and the screen shots above demonstrates this. When a host is first added a "trial license" is added to the system, which has a default 30 day expiration. 

The process to switch a host to a perpetual expiration date is to allocate or re-allocate EPS and / or  FPM capacity onto your managed hosts, which should overwrite the default "trial" with the perpetual expiration date. Instead, the reallocation process is not removing the trial host. 

The 'Any Appliance Type' line item, which is added by default when the software is activated, should be deleted from the system after the re-allocation process. You can ignore the expiration date, and / or manually delete the specific line item to remove it from view. 

Please note: In version 7.3 and above there are no individual processor licenses needed (16xx, 17xx, 18xx, etc.). All new capacity is added via the console licenses.

Once the re-allocation is completed, navigate to you license pool management tab to confirm that there are no expired or un-allocated hosts. If a host is set to expire there will be a red error message in this view. This is a screen shot of what a fully deployed license pool should look like: